Research On Construction And Security Gaurantee Of IPv6 Private Network For Oil And Gas Wells

The Internet is a significant part of information infrastructure in modern society therefore the next-generation of Internet Protocol(IPv6)has become an inevitable trend of the development of the Internet.Promote the construction and application of industrial production network based on IPv6 and accelerate the large-scale deployment of IPv6 is of great significance for the evolution and upgrade of information infrastructure.National Development and Reform Commission in 2012 determined the “Network security research and application based on IPv6 of the pilot project ” undertaken by CNPC,to carry out security research and application of IPv6 oil gas water wells production network pilot project in Daqing oilfield,Which is the Internet construction demonstration pilot based on the large state-owned enterprises in the next generation.This dissertation studies the construction of IPv6 oil and gas production network and the architecture of its security protection system.The main work and contributions are as follows:(1)The architecture of oil and gas production network based on IPv6 has been proposed and designed.This network covers 13 oil production station in the oilfield,69 operation areas and nearly 800 work groups and applied the /21-bit IPv6 address space.It is the second largest IPv6 industrial production network in China with address space second in size to the Internet carriers.A variety of technologies were used in this network to provide support for data transmission and video monitoring of oil and gas production,which completed a smooth transition from IPv4 to IPv6 and formed 16 enterprise standards.(2)The network security protection system based on IPv6 production network has been designed and implemented.In this network the security domain were divided,wireless access encryption were designed and deployed,firewall,intrusion detection,behavior audit and anti-virus system were mapped out.Also,the safe and reliable DNS services were built and the DNS64 domain name transformation for network transition were customized.According to requirements of the third level protection in classified baseline,the evaluation index,method and process were designed.The evaluation were completed,which meets the third level protection requirements of classified baseline.(3)A lightweight block cipher algorithm that encrypts the transmission data of oil and gas production has been designed and implemented.The encryption and decryption LIC algorithm for data transmission in IPv6 environment was designed and the security control of the access terminal was implemented.In the design,the RTU function,performance and safety requirements such as physical design,slot design and wireless transmission etc.were taken into consideration.The encryption card can adapt to the extreme environment of Daqing oilfield due to the fact that the working temperature range of the encrypted card was designed-40 degrees centigrade at low temperature and 70 degrees centigrade at high temperature,which ensures the stable transmission of signals in extremely harsh environments.(4)The transmission performance and security of IPv6 oil and gas production network have been verified.Combined with product parameters,the performance of IPv6 technology in business environment such as data collection,transmission and display were validated.Transmission performance and security of IPv6 production network were verified through network testing,equipment testing,software testing,wireless encryption testing etc.